NVD

Id
48898  
Name
CVE-2009-1629  
Description
ajaxterm.js in AjaxTerm 0.10 and earlier generates session IDs with predictable random numbers based on certain JavaScript functions, which makes it easier for remote attackers to (1) hijack a session or (2) cause a denial of service (session ID exhaustion) via a brute-force attack.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-05-14  
Modified Date
2011-01-19  
Seq
2009-1629  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
247036 48898 CVE-2009-1629 FEDORA-2010-18867  View
247037 48898 CVE-2009-1629 http://www.ocert.org/advisories/ocert-2009-004.html  View
247038 48898 CVE-2009-1629 [oss-security] 20090511 [oCERT-2009-004] AjaxTerm session id collision  View
247039 48898 CVE-2009-1629 20090511 [oCERT-2009-004] AjaxTerm session id collision  View
247040 48898 CVE-2009-1629 34903  View
247041 48898 CVE-2009-1629 ajaxterm-ajaxterm-session-hijacking(50464)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
42407 JVNDB-2009-003414 AjaxTerm の ajaxterm.js におけるサービス運用妨害 (DoS) の脆弱性 AjaxTerm の ajaxterm.js は、特定の JavaScript 関数を基に予想可能なランダム数字を含むセッション ID を生成するため、(1) セッションをハイジャックされる、または (2) サービス運用妨害 (セッション ID の消耗) 状態となる脆弱性が存在します。 CVE-2009-1629 39060 CVE-2009-1629 48898 6.8 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-003414.html 2009-05-14 2012-06-26 View